Security-X
Forum Security-X => News => Discussion démarrée par: igor51 le avril 03, 2023, 15:02:26
-
Not just an infostealer: Gopuram backdoor deployed through 3CX supply chain attack
A DLL named guard64.dll, which was loaded into the infected 3CXDesktopApp.exe process, was used in recent deployments of a backdoor that we dubbed “Gopuram” and had been tracking internally since 2020.
Source: Not just an infostealer: Gopuram backdoor deployed through 3CX supply chain attack (https://securelist.com/gopuram-backdoor-deployed-through-3cx-supply-chain-attack/109344/)